Cyber Risk Quantification That Turns Threat Intelligence Into Financial Exposure

Citalid is a French cyber risk quantification vendor built for CISOs, risk managers and insurance professionals who need cyber exposure expressed in monetary terms rather than colour-coded heat maps. The company was founded by Maxime Cartan and Alexandre Dieulangard, who previously worked together as cyber threat intelligence specialists at ANSSI, the French national cyber defence agency, and it operates from Paris. The platform is sold both to large enterprises and to insurers, brokers and portfolio managers underwriting cyber policies.

The platform is built on the FAIR framework, using a Bayesian approach that blends historical data with business expertise to estimate operational, reputational and legal loss categories, then running Monte Carlo simulations so results arrive as probability distributions rather than single-point estimates. Attack frequency is derived from continuously curated intelligence on tracked threat actors and their operational capacity, while a patented red-team simulation models attacker propagation across business assets, confronting simulated attacks with existing defences across thousands of runs per scenario.

What distinguishes the approach from generic risk scoring is the coupling of live adversary intelligence to the financial model, so likelihood shifts as threat actor activity changes instead of resting on static questionnaires. The same engine is packaged across several product lines covering enterprise quantification, insurance portfolio modelling and third-party risk, with outputs framed as budget trade-offs, security posture recommendations and return-on-investment comparisons. Public recognition includes the 2018 innovation prize at Les Assises de la Sécurité and the 2020 FIC startup prize.